ALAS2023-2026-3430

References: CVE-2026-95520  CVE-2026-95521 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext() that shrinks a buffer allocation to one byte, after which the payload's independently-controlled cpio filesize field is used to write attacker-controlled data past the end of that allocation. This is reachable via rpm2cpio, rpm2archive, and rpm -qlvp on an untrusted package. (CVE-2026-95520)

A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm. (CVE-2026-95521)

Issue Correction:
Run dnf update rpm --releasever 2023.12.20261112 or dnf update --advisory ALAS2023-2026-3430 --releasever 2023.12.20261112 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    rpm-plugin-prioreset-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-sign-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-sign-libs-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-build-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-devel-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-build-libs-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-libs-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-audit-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-sign-libs-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-syslog-4.16.1.3-29.amzn2023.0.10.aarch64
    python3-rpm-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-devel-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-systemd-inhibit-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-fapolicyd-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-libs-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-selinux-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-prioreset-4.16.1.3-29.amzn2023.0.10.aarch64
    python3-rpm-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-sign-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-debugsource-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-build-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-fapolicyd-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-syslog-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-selinux-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-build-libs-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-ima-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-ima-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-systemd-inhibit-4.16.1.3-29.amzn2023.0.10.aarch64
    rpm-plugin-audit-debuginfo-4.16.1.3-29.amzn2023.0.10.aarch64

noarch:
    rpm-apidocs-4.16.1.3-29.amzn2023.0.10.noarch
    rpm-cron-4.16.1.3-29.amzn2023.0.10.noarch

src:
    rpm-4.16.1.3-29.amzn2023.0.10.src

x86_64:
    rpm-plugin-fapolicyd-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-build-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-ima-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-selinux-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-build-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-sign-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-selinux-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-debugsource-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-devel-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-devel-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-syslog-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-ima-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-syslog-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-systemd-inhibit-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-libs-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-prioreset-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-systemd-inhibit-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-prioreset-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-sign-libs-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-fapolicyd-4.16.1.3-29.amzn2023.0.10.x86_64
    python3-rpm-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-sign-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    python3-rpm-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-audit-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-build-libs-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-build-libs-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-libs-debuginfo-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-plugin-audit-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-sign-libs-4.16.1.3-29.amzn2023.0.10.x86_64
    rpm-4.16.1.3-29.amzn2023.0.10.x86_64